Directory traversal in CRM-BF-IIA, SAP security note 1874456

SAP security note 1874456, "Directory traversal in CRM-BF-IIA", released on August 13, 2013. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

CRM-BF-IIA contains a vulnerability that allows an attacker to perform directory traversal. This can potentially enable the attacker to read arbitrary files on the remote server, leading to the disclosure of confidential information.

Solution

Refer to SAP Note 1497003 for additional information and instructions. Corrections from that note are a prerequisite for implementing this note.

CVSS

Score 0

References

• SAP Note 1497003 – Potential directory traversals in applications

Affected components

• Customer Relationship Management > Basic Functions > Interactive Intelligent Agent (CRM-BF-IIA)
• Customer Relationship Management > Interaction Center WebClient > Knowledge Search (CRM-IC-SOL)